Effective Date: May 10, 2026
Last Updated: September 5, 2026
From Parents and Teachers: We collect your email address and password when you create an account. Payment information is collected and processed by our payment processor — we do not store credit card numbers or other payment details on our servers.
From Children (Through Parent Accounts): Children do not create accounts. Parents create child profiles with a display name, date of birth, and reading level. We collect reading activity associated with each child profile: articles read, quiz scores, quiz answers, time spent reading, and reading streaks. We do not collect photos, videos, audio recordings, or precise geolocation from children. Children cannot make information publicly available on the Service.
Amazon Fire tablets and pairing: A parent can pair a household tablet by scanning a QR code in a web browser. Pairing stores a hashed device token, the selected child profile identifier, and a truncated device label derived from the tablet's user agent. The tablet camera is used only to read that QR code; we do not capture, store, or upload photos or video. After pairing, the tablet uses a device cookie plus the selected child profile. The child does not enter an email or password.
Automatically Collected: We use product analytics. For child reading we record the child profile UUID (not a name or email), page views, article opens, quiz events, and similar product usage. Session replay may record on-screen activity with form inputs masked. We do not use IP addresses to derive city, postal code, or region. We do not engage in behavioral advertising of any kind. Diagnostic crash reports may include technical stack traces and page URLs; they are not stored under a parent email user handle.
We use collected information to operate and improve the Service, provide reading progress reports to parents, generate AI-powered insights about reading habits, process payments, send transactional emails, and enforce daily read limits where applicable. Certain content-generation features are provided using third-party AI services. No child personally identifiable information is sent to those services — only the source article text is transmitted.
Verifiable parental consent is required before any child profile is created. Children do not authenticate directly — all child sessions are inherited from the parent account, including sessions on a paired household tablet. For teacher sharing, parents provide verifiable parental consent when a child enters a class code, covering current and future teacher connections in that classroom. We do not engage in behavioral advertising of any kind directed at children. We practice data minimization — a child's display name need not be their legal name. A nickname is still personal data. Parents may view all data associated with their child profiles via the parent dashboard and may delete the family account at https://graduated.news/delete-account or by contacting us at support@graduated.news. Access is revoked promptly. Personal data is erased or irreversibly de-identified within 30 days.
We do not sell personal information. We do not share personal information with third parties for marketing purposes. We share information with teachers only with explicit parental consent, and only the following: display name, reading level, and quiz performance. Parent email addresses, payment information, and dates of birth are never shared with teachers. We work with trusted service providers that help operate the Service, including hosting, analytics, communications, payment processing, and content generation providers. Those providers are contractually prohibited from using data for their own purposes beyond providing services to us. We may disclose information as required by law or to protect the rights, safety, or property of Graduated News or others.
We use HTTPS/TLS for all data transmission, row-level security in our database, server-side authentication, and secure environment variables for credentials. While we take security seriously, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
Data for active accounts is retained while the account remains active. When a child profile is deleted from the parent dashboard, associated reading activity is removed from that child within 30 days. When a parent deletes the family account at https://graduated.news/delete-account, access (including paired Fire tablets) is revoked immediately, and parent and child personal data is erased or irreversibly de-identified within 30 days. We may retain coarse monthly counts of quizzes, reads, and ratings that cannot reasonably be linked to a child or family. Stripe retains payment records the law requires. We do not keep a secret identifier that could rebuild the deleted family later. Diagnostic logs expire on our hosting providers' ordinary retention schedules.
Parents may access all data associated with their child profiles via the parent dashboard, request a copy of their data, request deletion of their data, and revoke teacher sharing at any time. Family accounts may be deleted at https://graduated.news/delete-account. That page deletes family (parent) accounts only; teacher accounts are not deleted there. Teachers may access only data to which parental consent has been granted and may not export data outside the Service except for the Conference Report shared with a child's parent or guardian. To exercise any of these rights, contact us at support@graduated.news.
We will notify you by email of any material changes to this Privacy Policy before the changes take effect. Continued use of the Service after notice constitutes acceptance of the updated policy.
SW Products LLC
Dallas, Texas
support@graduated.news